「うちの会社、大丈夫かな？」

Subject: [Security Alert] Please Update Your Software Immediately

Dear employees,
Due to advancements in AI, the risk of rapid attacks targeting software vulnerabilities has increased significantly.

Requested Actions:
1. Please apply any pending updates for your web browser (e.g., Firefox) and operating system (e.g., Windows) immediately.
2. Do not open suspicious email attachments or click on unknown links.

Deadline: End of today

Subject: [Info] Behavior of Trend Micro Deep Security Agent (DSA) on Linux

Dear team,

We are sharing information regarding the behavior of the Linux version of Trend Micro Deep Security Agent (DSA).

■ Overview
It has been reported that under extreme file system load, the ds_am process may reach its file descriptor (fd) limit, triggering an automatic restart and causing a temporary lapse in protection. Trend Micro has stated that this is an intended design to prevent the agent from impacting the host's stability and is not a security vulnerability.

■ Scope
- Product: Deep Security Agent (DSA) for Linux
- Condition: Environments with extremely high file system event volume

■ Recommended Actions
1. For servers in high-load environments, consider increasing the file descriptor (fd) limit settings.
2. Ensure that defense-in-depth mechanisms (e.g., Integrity Monitoring, XDR, SIEM) are properly configured.

■ Reference
- Trend Micro official response via iThome

Priority: Low
Deadline: As needed

Subject: [Security Alert] Miasma Worm Compromise of Microsoft GitHub Repositories

Dear Team,

We are sharing information regarding a supply chain attack targeting Microsoft's GitHub repositories.

■ Overview
A worm known as "Miasma" compromised 73 Microsoft GitHub repositories (including Azure and MicrosoftDocs). The attackers injected malicious configuration files designed to trigger Remote Code Execution (RCE) when the repositories are opened using IDEs or AI-powered tools such as Claude Code, Gemini CLI, or Cursor. This incident also disrupted CI/CD pipelines, notably Azure/functions-action.

■ Scope
- Development environments interacting with affected Microsoft GitHub repositories.
- Workflows relying on Azure/functions-action@v1.

■ Action Items
1. Advise developers to avoid opening untrusted or suspicious repositories in AI tools or IDEs.
2. Audit CI/CD pipelines to ensure they are not relying on compromised versions of GitHub Actions.
3. Enforce MFA for all contributor accounts and audit commit histories for unauthorized changes.

■ Reference
- Reports by OpenSourceMalware and StepSecurity

Priority: High
Deadline: Immediate

Subject: [Security Alert] For users of Logseq knowledge management software

Hi everyone,
Security vulnerabilities have been identified in the knowledge management software "Logseq." Using an outdated version may expose your system to potential attacks.

Requested Actions:
1. If you use Logseq, please update it to the latest version immediately.
2. If you are unsure how to update, please contact the IT help desk.

Deadline: By the end of this week

件名: 【共有】Logseq 複数脆弱性 (CVE-2026-9279 他) 対応について

お疲れさまです。Logseqに関する脆弱性情報共有です。

■ 概要
Logseq v0.10.15 以前に、OSコマンドインジェクション(CVE-2026-9279)、危険なメソッドの露出(CVE-2026-47899)、XSS(CVE-2026-47900)等の複数の脆弱性が報告されています。攻撃者が任意のコマンドを実行できるリスクがあります。

■ 影響範囲
- 対象製品: Logseq
- 対象バージョン: 0.10.15 までのすべてのバージョン

■ 対応手順
1. 社内でLogseqが利用されているかを確認する
2. 利用者の環境を最新バージョンへアップデートさせる

■ 参考情報
- CERT Polska アドバイザリ

対応優先度: 高
対応期限: 速やかに

Subject: [Security Info] Logseq Vulnerabilities (CVE-2026-9279 et al.)

Hi,
This is a technical update regarding vulnerabilities found in Logseq.

■ Overview
Multiple vulnerabilities have been reported in Logseq v0.10.15 and earlier, including OS Command Injection (CVE-2026-9279), Exposed Dangerous Method (CVE-2026-47899), and XSS (CVE-2026-47900). These could lead to arbitrary code execution.

■ Scope
- Product: Logseq
- Affected Versions: All versions up to 0.10.15

■ Mitigation Steps
1. Identify users within the organization utilizing Logseq.
2. Ensure all instances are updated to the latest patched version.

■ Reference
- CERT Polska Advisory

Priority: High
Deadline: Immediate